Records of categories of processing activities
Article 39a
1. Europol shall maintain a record of all categories of processing activities under its responsibility. That record shall contain the following information: (a) Europol’s contact details and the name and the contact details of the Data Protection Officer; (b) the purposes of the processing; (c) a description of the categories of data subjects and of the categories of personal data; (d) the categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations; (e) where applicable, transfers of personal data to a third country, an international organisation or private party, including the identification of that recipient; (f) where possible, the envisaged time limits for erasure of the different categories of data; (g) where possible, a general description of the technical and organisational security measures referred to in Article 91 of Regulation (EU) 2018/1725; (h) where applicable, the use of profiling. 2. The record referred to in paragraph 1 shall be in writing, including in electronic form. 3. Europol shall make the record referred to in paragraph 1 available to the EDPS on request.